5 ms·
A pretty good overview of "properly paranoid". Reading the comments, he does have backups, which is a good idea. As Timo Juhani Lindfors points out in the comm
by JoachimSchipper 14y ago
A pretty good overview of "properly paranoid". Reading the comments, he does have backups, which is a good idea.
As Timo Juhani Lindfors points out in the comments,
> The "xhost +local:mike.firefox" will let your mike.firefox user inject keystrokes to your X. This allows it to trivially escape the jail. I have personally been investigating solutions to this problem. The ones that I have found are: [qubes and xpra/vnc].
Finally, giving Firefox the ability to read audio is not ideal - it's probably enough to get a fairly decent keylogger going, for instance. (Persons and keyboards have characteristic sounds for keys/phrases.)
- zorlem 14y agoBy giving access to the X server, he effectively gives access to all keyboard and mouse events, so recording the audio of the keystrokes is not necessary (but could be another attack vector, if firefox could not be exploited for code execution).
- mike-cardwell 14y agoJust to be clear. Under normal circumstances, Firefox has all that access anyway. Just like any other app running under X11. Running it under a different user id means that if it is compromised, there is an extra step required before it can access files. A step which could lead to the compromise being noticed.
- ciupicri 14y agoA possible solution would be sandbox[1], but it requires SELinux which is unavailable under Ubuntu (Ubuntu uses AppArmor). [1] http://danwalsh.livejournal.com/28545.html http://danwalsh.livejournal.com/28545.html
- mike-cardwell 14y agoUbuntu defaults to AppArmor, but that doesn't mean SELinux is unavailable. All you need to do is an "apt-get install selinux"